LEGAL REFERENCE

Your data privacy at rastatoto

Q: What should I do if I think my rastatoto data has been compromised?

Contact privacy@rastatoto.app immediately with details. Our security team investigates within 24 hours. If confirmed, you're notified of the scope, impact and steps we've taken to secure your account.

We built rastatoto around your account security and payment confidence. This policy shows exactly how we handle your personal information, transaction history and gaming preferences across our live...

Account ProtectionPayment SecurityData TransparencyIndonesia ComplianceYour Rights

View Game Library Read FAQ

Privacy policy overview and scope

rastatoto collects and processes your personal information — name, contact details, identity verification records and transaction history — to deliver live casino tables, slot lobbies and sportsbook access in supported Indonesian regions. We use encryption and secure servers to protect all data. Your payment information with DANA, OVO, GoPay and QRIS stays encrypted at payment processing points. We never sell or share

your gaming activity with third parties outside our service delivery. This policy applies to all rastatoto accounts and covers both web and mobile access.

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

SUPPORT

Privacy inquiries and support channels

WHY VISITORS TRUST US

Trust signals and policy governance

Encryption Standards

All personal and payment data travels through industry-standard SSL/TLS encryption. Stored data is encrypted at rest on our secure servers...

Third-Party Audits

We engage independent security auditors annually to verify encryption protocols, access controls and data handling procedures across our infrastructure.

Transparent Logging

All data access events are logged and auditable. Your account activity history is visible to you; administrative access is tracked...

Payment Partner Compliance

DANA, OVO, GoPay and QRIS integrations meet their respective security standards. We don't store payment credentials; processors handle sensitive card...

Regular Policy Reviews

Our privacy team reviews this policy quarterly and updates it when Indonesian data laws change or our service infrastructure evolves.

Data Minimization Practice

We collect only what we need to operate your account, process payments and comply with local regulations. Unused data is...

How our privacy approach compares

Data Retention

We keep account data active for as long as your account exists. After closure, personal information is retained for 7 years to meet tax and regulatory obligations, then permanently deleted.

User Rights

You can request a copy of your data, correct inaccurate information or ask us to delete your account. Requests are processed within 30 days, subject to legal hold requirements.

Cookie & Tracking

We use session cookies for account security and functional cookies to remember your lobby preferences. Analytics cookies track page behaviour only; no third-party ad tracking on rastatoto.

Marketing Communications

You control all email and SMS outreach from rastatoto. Opt-out links are in every promotional message; unsubscribe takes effect within 48 hours.

International Data Transfers

Your data is processed on servers located in Indonesia-accessible regions. No data is transferred to countries outside Southeast Asia without your explicit consent.

Child Safety

rastatoto does not knowingly collect information from users under 18. If we discover underage account activity, we suspend the account and delete associated data immediately.

Breach Notification

If a security incident exposes your data, we notify you and relevant authorities within 72 hours with details of what was affected and steps we've taken to secure it.

Key privacy commitments

Payment Data Never Stored

DANA, OVO, GoPay and QRIS payment tokens are processed by certified payment partners. We never store full card numbers or wallet credentials on our servers.

Account Verification Only

We request identity verification only once during account setup to comply with Indonesian gaming regulations. After that, we confirm your identity through account activity, not repeated document uploads.

Gaming History Privacy

Your betting history, slot spins and live table sessions are visible only to you and our compliance team when legally required. We don't profile you across rastatoto to sell marketing insights.

Dispute Resolution Confidentiality

If you file a complaint or dispute, we keep that record private. Our support and compliance teams handle disputes under confidentiality; outcomes are shown only to you.

Third-Party Tool Restrictions

We don't embed social media pixels, affiliate trackers or ad networks inside rastatoto. Our lobby is your private space; no external parties follow your gameplay or betting patterns.

Withdrawal & Account Closure

Close your account anytime. After closure, we remove your active data within 30 days, except transaction records required for tax compliance, which stay encrypted for 7 years.

Privacy policy questions

We partner with certified payment processors who handle your wallet and card data. We never store payment credentials; only transaction tokens are logged to your account. All connections use bank-grade encryption.

Yes. Log into your account, go to Privacy & Preferences and select 'Download My Data'. We'll compile your profile, transaction history and activity logs into a file within 14 days.

Your account closes immediately. We delete active profile data within 30 days. Tax records and transaction summaries stay encrypted for 7 years to meet Indonesian regulatory requirements, then are permanently destroyed.

No. Your betting history and slot preferences are never sold, shared or used for external marketing. Only you and our compliance team (when legally required) access your gameplay records.

We review this policy quarterly and update it when Indonesian data laws change or our service evolves. Material changes are announced via email to all active accounts with 30 days' notice.

Contact [email protected] immediately with details. Our security team investigates within 24 hours. If confirmed, you're notified of the scope, impact and steps we've taken to secure your account.

Yes. Identity documents uploaded during account setup are encrypted at rest and in transit. We delete verification files after 90 days once your account is confirmed; only a verification flag remains in your profile.